tests-prod-test-bitly-links

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to fetch public pages (e.g., "Scan the PROD site" for https://itautonomos.com/ and its language subpaths) and to curl bit.ly links and their final destination pages for anchor checks, so it ingests and interprets untrusted third‑party web content as part of its workflow.